5 matches found
CVE-2025-2039
The CVE-2025-2039 entry concerns code-projects Blood Bank Management System 1.0. Affected is an unknown function of /admin/delete_members.php where manipulation of the member_id parameter enables SQL injection. The vulnerability can be exploited remotely and exploits have been disclosed publicly....
CVE-2025-2038
CVE-2025-2038 affects code-projects Blood Bank Management System 1.0. The vulnerability targets the /upload/ processing, where manipulation leads to information disclosure via directory listing. Details indicate a remote, unauthenticated access path with low to moderate integrity/confidentiality ...
CVE-2025-2044
The CVE-2025-2044 entry describes a SQL injection in code-projects Blood Bank Management System 1.0 via the /admin/delete_bloodGroup.php endpoint, caused by improper handling of the blood_id parameter. Exploitation can be performed remotely and the exploit has been disclosed publicly, indicating ...
CVE-2024-9035
The CVE-2024-9035 entry concerns Code-projects Blood Bank Management System 1.0. The vulnerability exists in the Admin Login component, specifically in /admin/login.php, where manipulating the username and password parameters yields a SQL injection. It is exploitable remotely and the exploit has ...
CVE-2025-2054
The CVE-2025-2054 entry concerns Code-Projects Blood Bank Management System 1.0. Affected component: the file /admin/edit_state.php, where manipulation of the argument state_id enables SQL injection. Root cause: improper handling of the state_id parameter leads to injection. Impact: allows remote...